Privacy Policy
Your privacy is our priority. We protect your data with full transparency and GDPR compliance.
Updated: January 2025
Data Controller Information
Controller Details
- Data Controller
- [Your Full Name or Business Name]
- Tax ID (NIF/NIE)
- [Your NIF/NIE]
- Address
- [Your Full Address in Murcia]
- support@growfile.app
- Phone
- [Your phone number]
Data Protection Officer
We do not have a Data Protection Officer (DPO) as we are not required under Art. 37 GDPR. For any data protection inquiries, please contact the controller at support@growfile.app
Our Commitment
- Full transparency about how your data is used
- Enterprise-grade protection
- Full GDPR and LOPD-GDD compliance
- Total control over your information
Personal Data Collected
Identifying Data
Basic information to create and manage your account.
Professional Information
Data from your CV, work experience, education, and skills.
Usage Data
How you interact with Growfile to improve our services.
Use and Purpose of Data
Main Purposes
Core Service
Creation and management of your CV and professional portfolio with AI assistance
Service Improvement
Usage analysis to optimize the user experience
Communication
Sending relevant information about your account and updates
×What We DO NOT Do
- ×Sell your data to third parties
- ×Create profiles for unsolicited advertising
- ×Share data without your explicit consent
- ×Retain data longer than necessary
Artificial Intelligence
Use of Artificial Intelligence
Growfile uses artificial intelligence to provide optimized services and improve your professional experience. The use of AI is fundamental to the operation of our platform.
Technology Providers
We use artificial intelligence services from recognized providers:
- OpenAI - For professional content generation and optimization
- Google (Gemini) - For content analysis and improvement
Data Protection in AI Processing
- Anonymized and pseudonymized data before processing
- Secure transfers under international protection frameworks
- End-to-end encryption in all communications
- We do not use your personal data to train AI models
International Data Transfers
Third-Country Service Providers
We use service providers located outside the European Union to deliver our services. All transfers comply with the GDPR (Art. 44-50 GDPR).
🇺🇸 United States - OpenAI
- • Services: AI content generation
- • Certification: EU-US Data Privacy Framework
- • Additional measures: TLS 1.3 encryption, pseudonymization
- • Retention policy: Maximum 30 days (OpenAI does not train on API data)
🇺🇸 United States - Google LLC
- • Services: Google Gemini (content analysis)
- • Certification: EU-US Data Privacy Framework
- • Additional measures: EU standard contractual clauses
- • Retention policy: GDPR-compliant
🇩🇪 Germany - Hetzner Online
- • Services: Hosting and VPS servers
- • Status: European Union (no international transfer required)
- • Certifications: ISO 27001
Your Rights in International Transfers
- Right to obtain information about appropriate safeguards
- Right to a copy of the applicable contractual clauses
- Right to lodge a complaint with the AEPD if you consider the transfer inadequate
Data Recipients
Service Providers
We share your data only with the providers necessary to deliver our services, always under strict security and confidentiality measures:
Payment Processors
Polar - Payment and subscription management. Shared data: Email, name, billing details.
Legal basis: Contract execution
Infrastructure
Hetzner - Hosting and servers. Shared data: All data necessary for the service.
Legal basis: Legitimate interest (security and maintenance)
AI Services
OpenAI and Google - AI processing. Shared data: Content to process (pseudonymized).
Legal basis: Explicit consent
Analytics
Plausible - Web analytics. Shared data: None (cookieless and anonymous).
Legal basis: Legitimate interest (service improvement)
What We DO NOT Do
- We do not sell your data to third parties
- We do not share data for marketing purposes
- We do not disclose data to authorities unless legally required
Your GDPR Rights
Main Rights
Access
Request a complete copy of your personal data that we process.
Rectification
Correct inaccurate data or complete incomplete information.
Erasure
Request the deletion of your personal data when it is no longer necessary.
Portability
Receive your data in a structured format and transfer it to another service.
Complaint
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing of your data infringes the GDPR.
Procedure
How to Exercise Your Rights?
- 1.Send an email to support@growfile.app
- 2.Specify which right you want to exercise
- 3.Attach identification document if necessary
- 4.You will receive a response within 24-48 hours (maximum 30 days under GDPR)
Right to complain: If you are not satisfied with the response, you can complain to the Spanish Data Protection Agency (AEPD): AEPD website
Available Formats
You can receive your data in JSON, CSV, or PDF format according to your preference.
Automated Decision-Making and Profiling
Use of Artificial Intelligence
Growfile uses artificial intelligence to generate professional content. This does not constitute an automated decision with significant legal effects, but rather an assistive tool that you control and approve.
What We Do
- • AI-powered content suggestions
- • Text optimization based on best practices
- • You always review and approve the final result
- • You can edit or reject any suggestion
Your Rights (Art. 22 GDPR)
- • Right not to be subject to automated decisions
- • Right to human intervention at any time
- • Right to express your point of view
- • Right to contest the decision
Guaranteed Human Control
AI at Growfile is an assistive tool, not a decision-maker. You have total control over the generated content and can modify, reject, or use it at your discretion. We do not make automatic decisions that affect your labor or professional rights.
Contact and Complaints
Contact Information
Complaint Process
- 1.Contact our support department first
- 2.You will receive a response within 48 hours
Your Trust Is Our Priority
We are committed to protecting your privacy and being transparent about how we use your data. If you have any questions or concerns, do not hesitate to contact us. We are here to help.